Best ways of using a username & password?

[Gary Mayor]

Hi,
I'm placing a username and password form on my site but can't decide on
the best way to do it. I've looked at
Apache Session ID
Encrypted cookies
and a couple of other things that are crap. What's the best method of
doing it. I need them to enter a username and password and I need the
site to remember there using it and timeout after 20 minutes of inactivity.
Is there an industry standard for doing this?

Help

Thanks

Gary Mayor

[A. Sinan Unur]

Gary Mayor <gary@abertron.co.uk> wrote in
news:cmE7b.123$eW.193317@newsfep1-win.server.ntli.net:

> Hi,
> I'm placing a username and password form on my site but can't decide
> on the best way to do it. I've looked at
> Apache Session ID
> Encrypted cookies
> and a couple of other things that are crap. What's the best method of
> doing it. I need them to enter a username and password and I need the
> site to remember there using it and timeout after 20 minutes of
> inactivity. Is there an industry standard for doing this?

None of this is topical for this group. Try
comp.inforsystems.[url]www.authoring.cgi[/url] for general questions, and find the
appropriate group for your server for server-specific questions.

You may want to consult the WWW Security FAQ
([url]http://www.w3.org/Security/Faq/www-security-faq.html[/url]) and the Login
Tutorial ([url]http://www.webthing.com/tutorials/LOGIN1.html[/url]).

Sinan.

--
A. Sinan Unur
[email]asu1@c-o-r-n-e-l-l.edu[/email]
Remove dashes for address
Spam bait: mailto:uce@ftc.gov

[Gary Mayor]

A. Sinan Unur wrote:

> Gary Mayor <gary@abertron.co.uk> wrote in
> news:cmE7b.123$eW.193317@newsfep1-win.server.ntli.net:
>
>

>>Hi,
>>I'm placing a username and password form on my site but can't decide
>>on the best way to do it. I've looked at
>>Apache Session ID
>>Encrypted cookies
>>and a couple of other things that are crap. What's the best method of
>>doing it. I need them to enter a username and password and I need the
>>site to remember there using it and timeout after 20 minutes of
>>inactivity. Is there an industry standard for doing this?

>
>
> None of this is topical for this group. Try
> comp.inforsystems.[url]www.authoring.cgi[/url] for general questions, and find the
> appropriate group for your server for server-specific questions.
>
> You may want to consult the WWW Security FAQ
> ([url]http://www.w3.org/Security/Faq/www-security-faq.html[/url]) and the Login
> Tutorial ([url]http://www.webthing.com/tutorials/LOGIN1.html[/url]).
>
> Sinan.
>

How can this be in the wrong group. This is a Perl Misc group and most
of the people on here will have there own methods of using passwords. My
topic is about perl I wasn't asking about any other language.
Miscellaneous means anything relating to Perl right so why the hell is
this in the wrong group. If people spent less time moaning and more
doing this world would be a better place.

But thanks for the last url that helped.

[Abigail]

Gary Mayor (gary@abertron.co.uk) wrote on MMMDCLXII September MCMXCIII in
<URL:news:2NG7b.983$lj5.564143@newsfep2-win.server.ntli.net>:
``
`` How can this be in the wrong group. This is a Perl Misc group and most
`` of the people on here will have there own methods of using passwords. My
`` topic is about perl I wasn't asking about any other language.
`` Miscellaneous means anything relating to Perl right so why the hell is
`` this in the wrong group. If people spent less time moaning and more
`` doing this world would be a better place.


*PLOINK*


Abigail
--
END {print "Hacker\n"}
BEGIN {print "Just " }
INIT {print "Perl " }
CHECK {print "another "}

[Gary Mayor]

Abigail wrote:

> Gary Mayor (gary@abertron.co.uk) wrote on MMMDCLXII September MCMXCIII in
> <URL:news:2NG7b.983$lj5.564143@newsfep2-win.server.ntli.net>:
> ``
> `` How can this be in the wrong group. This is a Perl Misc group and most
> `` of the people on here will have there own methods of using passwords. My
> `` topic is about perl I wasn't asking about any other language.
> `` Miscellaneous means anything relating to Perl right so why the hell is
> `` this in the wrong group. If people spent less time moaning and more
> `` doing this world would be a better place.
>
>
> *PLOINK*
>
>
> Abigail

hahahahaha

[Jürgen Exner]

Gary Mayor wrote:

> Hi,
> I'm placing a username and password form on my site but can't decide

For how to read a password please see "perldoc -q password".

Forms: Perl does not have forms.

> on the best way to do it. I've looked at
> Apache Session ID

Perl does not have Apache Session IDs

> Encrypted cookies

Perl does not have cookies

> and a couple of other things that are crap. What's the best method of
> doing it. I need them to enter a username and password and I need the
> site to remember there using it and timeout after 20 minutes of
> inactivity. Is there an industry standard for doing this?

As your question is in no way specific to Perl you may want to ask in a
Newsgroup where people actually care about CGI programming.
Or do you believe that just because I manage my cooking recipies with Perl a
question about the WestIndian Fire Pot would be on topic here, too?

jue

[Greg Schmidt]

On Wed, 10 Sep 2003 15:50:36 +0100, Gary Mayor <gary@abertron.co.uk>
wrote:

>A. Sinan Unur wrote:

>>
>> None of this is topical for this group. Try
>> comp.inforsystems.[url]www.authoring.cgi[/url] for general questions, and find the
>> appropriate group for your server for server-specific questions.
>>
>> You may want to consult the WWW Security FAQ
>> ([url]http://www.w3.org/Security/Faq/www-security-faq.html[/url]) and the Login
>> Tutorial ([url]http://www.webthing.com/tutorials/LOGIN1.html[/url]).
>>
>> Sinan.

>
>How can this be in the wrong group. This is a Perl Misc group and most
>of the people on here will have there own methods of using passwords. My
>topic is about perl I wasn't asking about any other language.

Your topic is not actually about Perl. Your topic is about CGI. People
can implement CGI in Perl, C/C++, Python, and many other languages. The
methods of handling usernames and passwords will be well known to CGI
programmers regardless of what languate they are using. These people
hang out in the newsgroup Sinan pointed you to, and will be able and
happy to help you with the concepts. If you have a problem
*implementing* your chosen solution in Perl, then this is the right
place to ask about it.

Conversely, Perl is used for many things other than CGI. There are many
people here who have been programming in Perl for many years and have
never written a CGI script.

>Miscellaneous means anything relating to Perl right so why the hell is
>this in the wrong group. If people spent less time moaning and more
>doing this world would be a better place.

The name ".misc" is a historical artifact, and is not meant to suggest
that a post with only a remote connection to Perl is acceptable.

If people posted their messages to the right place the first time
around, the world would be a better place. If people knew to accept a
message like Sinan's as being a friendly pointer to a place they can get
better help, the world would be a better place. The world is not made
better by someone blustering around in a Starbucks insisting that they
should sell books on how to grow your own coffee.

--
Greg Schmidt (gregs@trawna.com)
Trawna Publications ([url]http://www.trawna.com/[/url])

[Tad McClellan]

Gary Mayor <gary@abertron.co.uk> wrote:

> A. Sinan Unur wrote:

>> Gary Mayor <gary@abertron.co.uk> wrote in
>> news:cmE7b.123$eW.193317@newsfep1-win.server.ntli.net:

>>>I'm placing a username and password form on my site but can't decide
>>>on the best way to do it. I've looked at
>>>Apache Session ID
>>>Encrypted cookies

>> None of this is topical for this group.

> How can this be in the wrong group. This is a Perl Misc group and most
> of the people on here will have there own methods of using passwords. My

Most of the people here do not use Perl in the CGI environment.

I'm surprised you haven't noticed that in all the time you've been
lurking on this newsgroup.

> topic is about perl I wasn't asking about any other language.

You weren't asking about Perl either. You were asking about web
servers and the CGI.

People that know about servers and CGI hang out in newsgroups that
discuss servers and CGI.

You have a better chance of getting a good answer if you ask
where the experts hang out.

> Miscellaneous means anything relating to Perl right so why the hell is
> this in the wrong group.

Because your questions were about your application, not
about your programming language.

> If people spent less time moaning and more
> doing this world would be a better place.

So long.


--
Tad McClellan SGML consulting
[email]tadmc@augustmail.com[/email] Perl programming
Fort Worth, Texas

[John Bokma]

Jürgen Exner wrote:

> Perl does not have cookies

But you can eat them while using it :-)

--
Kind regards, feel free to mail: mail(at)johnbokma.com (or reply)
virtual home: [url]http://johnbokma.com/[/url] ICQ: 218175426
John web site hints: [url]http://johnbokma.com/websitedesign/[/url]

[Chris Mattern]

Gary Mayor wrote:

> A. Sinan Unur wrote:
>

>> Gary Mayor <gary@abertron.co.uk> wrote in
>> news:cmE7b.123$eW.193317@newsfep1-win.server.ntli.net:
>>

>>> Hi,
>>> I'm placing a username and password form on my site but can't decide
>>> on the best way to do it. I've looked at
>>> Apache Session ID
>>> Encrypted cookies
>>> and a couple of other things that are crap. What's the best method of
>>> doing it. I need them to enter a username and password and I need the
>>> site to remember there using it and timeout after 20 minutes of
>>> inactivity. Is there an industry standard for doing this?

>>
>>
>>
>> None of this is topical for this group. Try
>> comp.inforsystems.[url]www.authoring.cgi[/url] for general questions, and find
>> the appropriate group for your server for server-specific questions.
>>
>> You may want to consult the WWW Security FAQ
>> ([url]http://www.w3.org/Security/Faq/www-security-faq.html[/url]) and the Login
>> Tutorial ([url]http://www.webthing.com/tutorials/LOGIN1.html[/url]).
>> Sinan.
>>

>
> How can this be in the wrong group. This is a Perl Misc group

And your question has nothing to do with Perl. It is an http
and webserver/CGI question, which is why Sinan pointed you to
comp.inforsystems.[url]www.authoring.cgi[/url].

Chris Mattern

[A. Sinan Unur]

Gary Mayor <gary@abertron.co.uk> wrote in
news:2NG7b.983$lj5.564143@newsfep2-win.server.ntli.net:

> A. Sinan Unur wrote:

>> Gary Mayor <gary@abertron.co.uk> wrote in
>> news:cmE7b.123$eW.193317@newsfep1-win.server.ntli.net:
>>
>>

>>>Hi,
>>>I'm placing a username and password form on my site but can't decide
>>>on the best way to do it.

<snip>

>> None of this is topical for this group. Try ...

<snip>

> How can this be in the wrong group.

....

> why the hell is this in the wrong group.

<snip>

> But thanks for the last url that helped.

You are not welcome.

I tried to direct you to some useful resources more relevant to your
question (without using any harsh language). I think the burden is on
you, when someone tells you that your post is off-topic, to check the
charter of the newsgroup to make sure you are in the right place before
you yell and scream at people.

Sinan.
--
A. Sinan Unur
[email]asu1@c-o-r-n-e-l-l.edu[/email]
Remove dashes for address
Spam bait: mailto:uce@ftc.gov

[Tina Mueller]

A. Sinan Unur wrote:

> None of this is topical for this group. Try
> comp.inforsystems.[url]www.authoring.cgi[/url] for general questions, and find the

^
comp.infosystems.[url]www.authoring.cgi[/url]

regards, tina
--
[url]http://www.tinita.de/[/url] \ enter__| |__the___ _ _ ___
[url]http://Movies.tinita.de/[/url] \ / _` / _ \/ _ \ '_(_-< of
[url]http://www.perlquotes.de/[/url] \ \ _,_\ __/\ __/_| /__/ perception
- the above mail address expires end of december 2003 -

[A. Sinan Unur]

Tina Mueller <usenet@expires12.2003.tinita.de> wrote in news:bjo2t0$lavn6$2
@ID-24002.news.uni-berlin.de:

> A. Sinan Unur wrote:

>> None of this is topical for this group. Try
>> comp.inforsystems.[url]www.authoring.cgi[/url] for general questions, and find the

> ^
> comp.infosystems.[url]www.authoring.cgi[/url]
>
> regards, tina

oooops! thanks for pointing that out.

--
A. Sinan Unur
[email]asu1@c-o-r-n-e-l-l.edu[/email]
Remove dashes for address
Spam bait: mailto:uce@ftc.gov